WordPress Mapplic 6.1 SSRF / Cross Site Scripting

Title : Mapplic Wordpress Plugins Stored XSS Injection via SSRF Date : 22/03/2021 Author : Eagle Eye Vendor Homepage : https://mapplic.com/ Version Affected : 6.1 and below Tested on : Google Chrome XSS Vuln from add/edit Map and bypass with host raw.githubusercontent.com 1.Login as user 2.Add...

raw.githubusercontent.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1158934 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

raw.githubusercontent.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1061511 Security Researcher dhruvp111296 Helped patch 6 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting raw.githubusercontent.com website and its users. Following coordinated and responsible vulnerability disclosure...